zcgl vendor composer spdx-licenses .github workflows